Free CISM Exam Braindumps
Certified Information Security Manager Questions 381–385 (page: 78)

Updated On: 10-Feb-2026

Which of the following would be the MOST effective to mitigate the risk of data loss in the event of a stolen laptop?

  1. Providing end-user awareness training focused on travelling with laptops
  2. Deploying end-point data loss prevention software on the laptop
  3. Encrypting the hard drive
  4. Utilizing a strong password

Answer(s): C



Which of the following is the BEST method for determining whether new risks exist in legacy applications?

  1. Regularly scheduled risk assessments
  2. Automated vulnerability scans
  3. Third-party penetration testing
  4. Frequent updates to the risk register

Answer(s): A



Which of the following processes can be used to remediate identified technical vulnerabilities?

  1. Running baseline configurations
  2. Conducting a risk assessment
  3. Performing a business impact analysis (BIA)
  4. Running automated scanners

Answer(s): B



Which of the following would provide senior management with the BEST information to better understand the organization’s information security risk profile?

  1. Scenarios that impact business operations
  2. Scenarios that disrupt client services
  3. Scenarios that impact business goals
  4. Scenarios that have a monetary impact

Answer(s): C



A software vendor has announced a zero-day vulnerability that exposes an organization’s critical business systems, following should be the information security manager’s PRIMARY concern?

  1. Business tolerance of downtime
  2. Adequacy of the incident response plan
  3. Availability of resources to implement controls
  4. Ability to test patches prior to deployment

Answer(s): C



Viewing page 78 of 345
Viewing questions 386 - 390 out of 1716 questions


Post your Comments and Discuss ISACA CISM exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!